I would like to setup a firewall in-front of a loadbalancer. I have configured UFW firewalls at the server level. The DigitalOcean tutorial for the loadbalancer seems to be aimed at allowing setup of firewall rules for the droplets but NOT the loadbalancer. Perhaps im missing something, as I dont have alot of experience in networking. Perhaps I need a different product. I f I there is a loadbalancer level firewall, I’d like to put a rate limiter and deny for specific IP Addresses to protect the loadbalancer and scrubout bad traffic. Thank you, any insight would be appreciated.
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Hi there,
You cannot add or remove firewall rules to load balancers using the control panel, but you can add them using the API or CLI by adding IP addresses and CIDRs to the allow list and deny list fields.
I recently answered a similar question here:
To add or remove firewall rules from an existing load balancer using the CLI, use the --allow-list and --deny-list flags with the update command to define a list of IP addresses and CIDRs that the load balancer will accept or block incoming connections from.
To add or remove firewall rules via the command-line, follow these steps:
-
Install
doctl, the DigitalOcean command-line tool. -
Create a personal access token, and save it for use with
doctl. -
Use the token to grant
doctlaccess to your DigitalOcean account.doctl auth initCopy
-
Finally, add or remove firewall rules with
doctl compute load-balancer update. The basic usage looks like this, but you’ll want to read the usage docs for more details:doctl compute load-balancer update <id> [flags]
You can find the full documentation here:
Hope that this helps and let me know if you have any questions!
Best,
Bobby
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and SMBs
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.